Behavioral task
behavioral1
Sample
cf2a27f4f21524b62cb0e8c2b3d64879_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
cf2a27f4f21524b62cb0e8c2b3d64879_JaffaCakes118
-
Size
1.3MB
-
MD5
cf2a27f4f21524b62cb0e8c2b3d64879
-
SHA1
37aed357e4661fbf0197646ca843a68bb159e25d
-
SHA256
b0bb01796ae40c5ee2e28f8ae68a289bc53a35cc38a29bae2bcf1b2a9dc2a0e0
-
SHA512
fd3fd37c1ea3420dd4d04628a36e95068e0684309122db92e2b90f34d797d722ceb2d39b3e8a094ca4c476da9db9f406afe8e6961df0bd1c3f810e1666ef53e0
-
SSDEEP
24576:kb2WWD8qpVrUOoBNa8OphadAvaDSp02k8ovn4Uw3kaeuCZHfnJDKdpwzLIqAmRdg:ESIY5DuNaTZISp4dnEUuCZ/nJDEpKikg
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf2a27f4f21524b62cb0e8c2b3d64879_JaffaCakes118
Files
-
cf2a27f4f21524b62cb0e8c2b3d64879_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 5KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.2MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE